Step Tools Third-Party
view advisory published 2023-03-29
Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a specially constructed file.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0973US | medium5.5 | — | ||
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructe… | ||||
02
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-068-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-068-04 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedSTEPTools v18SP1 ifcmesh library
STEPTools has provided an updated version of their software and recommends users update to v18.102. STEPTools requests users contact them via email for assistance with obtaining and applying the update.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan